[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-15889 -- libpodofo

Deprecated
ID: oval:org.secpod.oval:def:2001173Date: (C)2019-04-22   (M)2023-11-08
Class: VULNERABILITYFamily: unix




In podofo 0.9.6, the function PoDoFo::PdfParser::ReadObjects in base/PdfParser.cpp can cause the program to be aborted, because PoDoFo::PdfVecObjects::Reserve in base/PdfVecObjects.h can be called with a large size value. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

Platform:
Debian 8.x
Debian 9.x
Product:
libpodofo-dev
Reference:
CVE-2018-15889
CVE    1
CVE-2018-15889
CPE    3
cpe:/a:libpodofo:libpodofo-dev
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x

© SecPod Technologies